Observability MCP Server

This is a well-architected MCP observability gateway with mature security patterns including RBAC, audit logging, CSRF protection, and token budgeting. However, several moderate-severity issues warrant attention: (1) SSRF protections are environment-gated and default-permissive, allowing local/private network access without explicit operator opt-in; (2) arbitrary connector installation from URLs without strict provenance validation in default mode; (3) broad shell-like subprocess patterns in the connector plugin loader; (4) sensitive auth state (session tokens, API keys) cached in memory without strict lifecycle controls. The codebase demonstrates strong intent around security but has operational configuration gaps that could enable exploitation if defaults are not overridden. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

4 files analyzed · 15 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.